Skip to contentJuliangruber Brace-expansion vulnerabilities
- juliangruber brace-expansionbrace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustionCVE-2026-102278Fix available7.5 High
- juliangruber brace-expansionbrace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of serviceCVE-2026-102277Fix available5.3 Medium
- juliangruber brace-expansionbrace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustionCVE-2026-102276Fix available7.5 High
- juliangruber brace-expansionbrace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigationCVE-2026-69152Fix available7.5 High
- juliangruber brace-expansionbrace-expansion DoS via unbounded expansion length causing an out-of-memory process crashCVE-2026-14257Fix available7.5 High
- juliangruber brace-expansionbrace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groupsCVE-2026-13149Fix available7.7 High
- juliangruber brace-expansionbrace-expansion: Large numeric range defeats documented `max` DoS protectionCVE-2026-45149Fix available6.5 Medium
- juliangruber brace-expansionbrace-expansion: Zero-step sequence causes process hang and memory exhaustionCVE-2026-33750Fix available6.5 Medium
- isaacs brace-expansionUncontrolled Resource Consumption in @isaacs/brace-expansionCVE-2026-25547Fix available9.2 Critical
- juliangruber brace-expansionjuliangruber brace-expansion index.js expand redosCVE-2025-5889Fix available2.3 Low